Human error, out-of-policy activity, and malicious insiders can compromise the very foundation the business is built on. Managing risk and protecting the business requires a comprehensive security practice that covers all foundational interfaces at all times. IT Foundation Management provides the security the business needs with the transparency to prove the practice.

1. IT Foundation Management for Security Securing the IT Foundation of your Business Your business is built on IT

2. What is the IT Foundation? The IT Foundation includes all of your physical and virtual: Servers… Network Gear… SANS… Operating Systems… Blades… Networks… Databases… Appliances… Virtual Machines… Environment… And is supported by: Michael… VM Administrator I’m Joe… Solaris Systems Administrator Steve, I’m a SANS Administrator Cheryl, Oracle DBA… Hi. Raphael. Network Administration Dave, Independent Consultant Chris here… Tools Manager Hi I’m Tania, Linux Systems Administrator TDi Technologies Your business is built on IT

3. IT Foundation Management Privileged Interfaces DELIVERS: Persistent Security Model Unified Security Practice Automatic Forensics Capture Transparency & Oversight DRIVING: Comprehensive Security Coverage Simplified Management Model Common-Consistent Practices Transparency Reliability Quality YIELDING: Meeting of CISO Mandates Enhanced Information Assurance Improved Governance Reduced Risk Better Control Privileged Actors Michael… VM Administrator I’m Joe… Solaris Systems Administrator Steve, I’m a SANS Administrator Cheryl, Oracle DBA… Hi. Raphael. Network Administration Dave, Independent Consultant Chris here… Tools Manager Hi I’m Tania, Linux Systems Administrator TDi Technologies Your business is built on IT

4. The Challenges are Driven by Complexity TDi Technologies Your business is built on IT Siloed Operation. Multiple Applications. Many Methods. Labor Intensive. I’m Joe… Solaris Systems Administrator Hi. Raphael. Network Administration Steve, I’m a SANS Administrator Hi I’m Tania, Linux Systems Administrator Cheryl, Oracle DBA… Michael… VM Administrator

5. Simplified by IT Foundation Management TDi Technologies Your business is built on IT To a unified security solution over all privileged users and interfaces. I’m Joe… Solaris Systems Administrator Hi. Raphael. Network Administration Steve, I’m a SANS Administrator Hi I’m Tania, Linux Systems Administrator Cheryl, Oracle DBA… Michael… VM Administrator

6. IT Foundation Management Traditional Practices Persistence: Normal Operation Documentation: Manual Persistence: All Modes Documentation: Automatic Secured in Normal Mode Only Documentation is by hand Persistent connection Full security in all modes Full documentation in all modes including: Normal Operation Maintenance Configuration Failure With New Capabilities that Drive Success TDi Technologies Your business is built on IT

7. Command and Control TDi Technologies Your business is built on IT IT Foundation Management Delivers Real-time Policy Enforcement Business Rules Threat! Generate Alert Terminate Access Etc… Their activity is scanned in real-time against Policies Break/Fix Incidents Configuration Patching Programming Housekeeping Maintenance Install software Privileged Actors perform their Work Resulting in Real-Time Foundational Command and Control Real-time scanning of Privileged User Activity Script Engine for Complex and Wildcard Rules Control over Sessions – including Termination Configurable Alert Priorities Custom Actions (email, text, terminate) Unlimited Rules Support Directly Embed Compliance Rules in Scans No Threat. No Action Required.

8. Simplification Example – Access Complexity With the Traditional Approach, Privileged Actors need to know… Log on? PuTTY? Absolute? Credentials? TeraTerm? ZOC? IP Address? SSH? CMDB? Commands? Tunnelier? WHERE? WHICH? WHAT? HOW? Terminal? Other DB? TELNET? etc? Other records? HTTP? Other? What syntax applies? With IT Foundation Management, Privileged Actors need to know… NAME

10. Performance

11. Features

13. Demand

14. New requirements

15. Issues

16. Expansion

18. Update user/asset records

19. Run backups

21. Managing the IT Services Foundation Application Application Application Service Completes Application Service Starts Business logic is updated as needed (continuous improvement) This information is collected in real-time Response/ Remediation actions are triggered Business logic is applied: Events, SLA Threats

22. Use Case – Electronic Funds Transfer (EFT) Receiving Bank Transfer/Posting Service Currency Exchange Service Federal Reserve Transfer Service Service Completes Sending Bank Wire Transfer Service Service Starts Business logic is updated as needed (continuous improvement) SLA Management: Transactions (tracking) & Applications (errors) Work Bottlenecks Monitor, Predict, Alert on end-to-end processing time Identify Issues (work stoppage) in Real-Time This information is collected in real-time Remediation actions are triggered Business logic is applied: SLA Threats

23. Customer B Instance Customer A Instance Customer C Instance Customer D Instance Customer E Instance IT Foundation Management in Public Clouds CLOUD ITFM for Public Clouds: Privileged Interfaces Secured Isolated from other Cloud Customers Isolated from Cloud Provider Privileged Activity Automatically Recorded (down to the keystroke) IT Operations Simplified and Optimized IT Services Effectively Managed

24. Reducing Risk to the Business TDi Technologies Your business is built on IT “ Manual documentation Automatic Documentation Reducing our risk exposure is always a good thing. When it includes addressing regulatory, security and operational challenges the value adds up fast. CEO Unnecessary complexity Dramatic Simplification Unified Privileged Interface Security Siloed security tools and practices Real-time Command & Control Little or no control capability RISK Definitive Verification Explicit Accountability No means of verification Lack of accountability When mistakes happen in the IT Foundation, the business is placed at risk.

25. IT Security and Compliance Benefits VP IT Operations Access policy enforceable Change records automatically captured Verification easy CISO expectations met point by point IT Tools Manager The right tool that does the whole job right Reduction in workload Increased internal customer satisfaction Problem solved! The Business Assets better protected Operations simplified Oversight and transparency enabled Risks reduced CISO Privileged user security in all modes Strong, verifiable deterent Comprehensive forensics records TDi Technologies Your business is built on IT

27. Record the 5 Ws

29. Detect compliance events

30. Build auditable historyIT Services Foundation Delivering on Commitments Sense and Respond in real-time• Correlate across the architecture• Proactively manage and protect• TDi Technologies Your business is built on IT